rubinxin / BayesOpt_Attack
Targeted black-box adversarial attack using Bayesian Optimization
☆37Updated 4 years ago
Alternatives and similar repositories for BayesOpt_Attack:
Users that are interested in BayesOpt_Attack are comparing it to the libraries listed below
- ☆87Updated 9 months ago
- StrAttack, ICLR 2019☆33Updated 5 years ago
- ☆48Updated 4 years ago
- Official implementation for paper: A New Defense Against Adversarial Images: Turning a Weakness into a Strength☆38Updated 5 years ago
- Code for Black-Box Adversarial Attack with Transferable Model-based Embedding☆57Updated 4 years ago
- [CVPR'19] Trust Region Based Adversarial Attack☆20Updated 4 years ago
- Code for the paper "MMA Training: Direct Input Space Margin Maximization through Adversarial Training"☆34Updated 5 years ago
- Code for the paper "Adversarial Training and Robustness for Multiple Perturbations", NeurIPS 2019☆47Updated 2 years ago
- [NeurIPS2020] The official repository of "AdvFlow: Inconspicuous Black-box Adversarial Attacks using Normalizing Flows".☆46Updated last year
- Code for FAB-attack☆32Updated 4 years ago
- Code for "Prior Convictions: Black-box Adversarial Attacks with Bandits and Priors"☆14Updated 6 years ago
- MACER: MAximizing CErtified Radius (ICLR 2020)☆29Updated 5 years ago
- RayS: A Ray Searching Method for Hard-label Adversarial Attack (KDD2020)☆56Updated 4 years ago
- ☆13Updated 4 years ago
- Codebase for "Exploring the Landscape of Spatial Robustness" (ICML'19, https://arxiv.org/abs/1712.02779).☆26Updated 5 years ago
- Code and data for the ICLR 2021 paper "Perceptual Adversarial Robustness: Defense Against Unseen Threat Models".☆55Updated 3 years ago
- Implementation of Wasserstein adversarial attacks.☆23Updated 4 years ago
- Adversarial Distributional Training (NeurIPS 2020)☆63Updated 4 years ago
- Code for Stability Training with Noise (STN)☆21Updated 4 years ago
- Code for "Prior Convictions: Black-Box Adversarial Attacks with Bandits and Priors"☆64Updated 5 years ago
- Sparse-RS: a versatile framework for query-efficient sparse black-box adversarial attacks☆45Updated 3 years ago
- ☆35Updated 4 years ago
- [NeurIPS'20 Oral] DVERGE: Diversifying Vulnerabilities for Enhanced Robust Generation of Ensembles☆55Updated 3 years ago
- [ICML'20] Multi Steepest Descent (MSD) for robustness against the union of multiple perturbation models.☆26Updated 9 months ago
- Repository for Certified Defenses for Adversarial Patch ICLR-2020☆32Updated 4 years ago
- Fighting Gradients with Gradients: Dynamic Defenses against Adversarial Attacks☆38Updated 3 years ago
- Official implementation for Training Certifiably Robust Neural Networks with Efficient Local Lipschitz Bounds (NeurIPS, 2021).☆23Updated 2 years ago
- ☆54Updated 2 years ago
- Source code for Learning Transferable Adversarial Examples via Ghost Networks (AAAI2020)☆59Updated 6 years ago
- Feature Scattering Adversarial Training (NeurIPS19)☆73Updated 11 months ago